Threats Tagged 'brew-pdfly-cve-2026-27025'

1 threat

Threats Tagged 'brew-pdfly-cve-2026-27025'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-27025pypdf · Excessive Iteration Medium6.9EPSS 0.2%2026-02-20CVE Database V5CVE-2026-27025 ### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the `/ToUnicode` entry of a font with unusually large values, for example during text extraction. ### Patches This has been fixed in [pypdf==6.7.1](https://github.com/py-pdf/pypdf/releases/tag/6.7.1). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3646](https://github.com/py-pdf/pypdf/pull/3646). EPSS 0.2%Vulnerability py-pdf #cwe-834 #brew-pdfly-cve-2026-27025 United States+9	CVE Database V5	2026-02-20

Showing 1–1 of 1 result